Important notice about Zendesk and Twitter Help Center

[Jake Kouns <jkouns () opensecurityfoundation org>]

Based on this email from Twitter, it appears that the outsourced
ZenDesk, used for customer support portals, was compromised. It is
unknown how many companies were impacted as a result of this.

---------- Forwarded message ----------
From: Twitter <no-reply () postmaster twitter com>
Date: 21 Feb 2013 22:24:37 -0500
Subject: Important notice about Zendesk and Twitter Help Center

Twitter ? along with a number of other companies
<http://app.tweet.twitter.com/e/er?s=1259914507&lid=526&elq=cd57acf5553c46afbfa61f562b492142>
? uses a customer support portal called Zendesk. Zendesk recently
blogged about a significant security breach
<http://app.tweet.twitter.com/e/er?s=1259914507&lid=527&elq=cd57acf5553c46afbfa61f562b492142>.
In order to ensure those who may be impacted by this breach are
notified as quickly as possible, we are sending this notification to
all email addresses, including this one, that we believe could have
been involved.

Zendesk?s breach did not result in the exposure of information such as
Twitter account passwords. It may, however, have included contact
information you provided when submitting a support request such as an
email, phone number, or Twitter username. Further information about
the breach can be found in their blog post
<http://app.tweet.twitter.com/e/er?s=1259914507&lid=527&elq=cd57acf5553c46afbfa61f562b492142>.

We do not believe you need to take any action at this time but wanted
to ensure that you were notified of this incident.

- Twitter

Twitter, Inc.     1355 Market St., Suite 900 San Francisco, CA 94103
 Unsubscribe <http://app.tweet.twitter.com/e/u?s=1259914507&elq=
cd57acf5553c46afbfa61f562b492142>
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Supporters:

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security equips organizations with security intelligence, risk
management services and on-demand security solutions to establish
customized risk-based programs to address information security and
compliance challenges.